WIRELESS SECURITY
CONTENTS I: WIRELESS TECHNOLOGY CHAPTER 1: WIRELESS FUNDAMENTALS 1 1 THE WIRELESS MEDIUM 1 2 WIRELESS NETWORKING BASICS CHAPTER 2: WIRELESS NETWORK LOGICAL ARCHITECTURE 2 1 THE OSI NETWORK MODEL 2 2 NETWORK LAYER TECHNOLOGIES 2 3 DATA LINK LAYER TECHNOLOGIES 2 4 PHYSICAL LAYER TECHNOLOGIES 2 5 OPERATING SYSTEM CONSIDERATIONS 2 6 SUMMARY CHAPTER 3: WIRELESS NETWORK PHYSICAL ARCHITECTURE 3 1 WIRED NETWORK TOPOLOGIES—A REFRESHER 3 2 WIRELESS NETWORK TOPOLOGIES 3 3 WIRELESS LAN DEVICES 3 4 WIRELESS PAN DEVICES 3 5 WIRELESS MAN DEVICES CHAPTER 4: RADIO COMMUNICATION BASICS 4 1 MECHANISMS OF RADIO WAVE PROPAGATION 4 2 OPEN FIELD PROPAGATION 4 3 DIFFRACTION 4 4 SCATTERING 4 5 PATH LOSS 4 6 MULTIPATH PHENOMENA 4 7 FLAT FADING 4 8 DIVERSITY TECHNIQUES 4 9 NOISE 4 10 COMMUNICATION PROTOCOLS AND MODULATION 4 11 SUMMARY REFERENCES CHAPTER 5: INFRARED COMMUNICATION BASICS 5 1 THE IR SPECTRUM 5 2 INFRARED PROPAGATION AND RECEPTION 5 3 SUMMARY CHAPTER 6: WIRELESS LAN STANDARDS 6 1 THE 802 11 WLAN STANDARDS 6 2 THE 802 11 MAC LAYER 6 3 802 11 PHY LAYER 6 4 802 11 ENHANCEMENTS 6 5 OTHER WLAN STANDARDS 6 6 SUMMARY CHAPTER 7: WIRELESS SENSOR NETWORKS 7 1 INTRODUCTION TO WIRELESS SENSOR NETWORKS 7 2 INDIVIDUAL WIRELESS SENSOR NODE ARCHITECTURE 7 3 WIRELESS SENSOR NETWORKS ARCHITECTURE 7 4 RADIO OPTIONS FOR THE PHYSICAL LAYER IN WIRELESS SENSOR NETWORKS 7 5 POWER CONSIDERATION IN WIRELESS SENSOR NETWORKS 7 6 APPLICATIONS OF WIRELESS SENSOR NETWORKS 7 7 FUTURE DEVELOPMENTS II: SECURITY DE? NITIONS AND CONCEPTS CHAPTER 8: ATTACKS AND RISKS 8 1 THREATS TO PERSONAL PRIVACY 8 2 FRAUD AND THEFT 8 3 INTERNET FRAUD 8 4 EMPLOYEE SABOTAGE 8 5 INFRASTRUCTURE ATTACKS 8 6 MALICIOUS HACKERS 8 7 MALICIOUS CODERS 8 8 INDUSTRIAL ESPIONAGE 8 9 SOCIAL ENGINEERING ENDNOTES CHAPTER 9: SECURITY DE? NED 9 1 WHAT IS SECURITY? 9 2 WHAT CAN WE DO? 9 3 ACCESS CONTROL AND THE ORIGINS OF COMPUTER SECURITY THEORY 9 4 SECURITY POLICIES 9 5 DATA INTEGRITY AND AUTHENTICATION 9 6 RECOMMENDED READING CHAPTER 10: STANDARDIZING SECURITY 10 1 PROTOCOL MADNESS 10 2 STANDARDIZING SECURITY—A BRIEF HISTORY 10 3 STANDARDIZED SECURITY IN PRACTICE 10 4 CRYPTOGRAPHY AND PROTOCOLS 10 5 OTHER SECURITY PROTOCOLS CHAPTER 11: SECURE SOCKETS LAYER 11 1 SSL HISTORY 11 2 PESKY PKI 11 3 PKI ALTERNATIVES 11 4 SSL UNDER THE HOOD 11 5 THE SSL SESSION 11 6 SSL IN PRACTICE CHAPTER 12: CRYPTOGRAPHY 12 1 DO WE NEED CRYPTOGRAPHY? 12 2 HASHING—LOW SECURITY, HIGH PERFORMANCE 12 3 TO OPTIMIZE OR NOT TO OPTIMIZE 12 4 CHOOSING CRYPTOGRAPHIC ALGORITHMS 12 5 TAILORING SECURITY FOR YOUR APPLICATION CHAPTER 13: MANAGING ACCESS 13 1 ACCESS CONTROL 13 2 PASSWORD MANAGEMENT CHAPTER 14: SECURITY AND THE LAW 14 1 THE 1996 NATIONAL INFORMATION INFRASTRUCTURE PROTECTION ACT 14 2 PRESIDENT’S EXECUTIVE ORDER ON CRITICAL INFRASTRUCTURE PROTECTION 14 3 THE USA PATRIOT ACT OF 2001 14 4 THE HOMELAND SECURITY ACT OF 2002 14 5 CHANGES TO EXISTING LAWS 14 6 INVESTIGATIONS 14 7 ETHICS CHAPTER 15: INTRUSION PROCESS 15 1 PRO? LING TO SELECT A TARGET OR GATHER INFORMATION 15 2 SOCIAL ENGINEERING 15 3 SEARCHING PUBLICLY AVAILABLE RESOURCES 15 4 WAR-DRIVING, -WALKING, -FLYING, AND -CHALKING 15 5 EXPLOITABLE WLAN CON? GURATIONS 15 6 HOW INTRUDERS OBTAIN NETWORK ACCESS TO A WLAN 15 7 PASSWORD GATHERING AND CRACKING SOFTWARE 15 8 SHARE ENUMERATORS 15 9 USING ANTENNAS AND WLAN EQUIPMENT 15 10 DENIAL-OF-SERVICE ATTACKS AND TOOLS 15 11 ROGUE DEVICES AS EXPLOITATION TOOLS CHAPTER 16: SECURITY POLICY 16 1 BEST PRACTICE #1 16 2 BEST PRACTICE #2 16 3 BEST PRACTICE #3 III WIRELESS NETWORK SECURITY CHAPTER 17: SECURITY IN TRADITIONAL WIRELESS NETWORKS 17 1 SECURITY IN FIRST GENERATION TWNS 17 2 SECURITY IN SECOND GENERATION TWNS 17 3 SECURITY IN 2 5 GENERATION TWNS 17 4 SECURITY IN 3G TWNS 17 5 SUMMARY CHAPTER 18: WIRELESS LAN SECURITY 18 1 INTRODUCTION 18 2 KEY ESTABLISHMENT IN 802 11 18 3 ANONYMITY IN 802 11 18 4 AUTHENTICATION IN 802 11 18 5 CON? DENTIALITY IN 802 11 18 6 DATA INTEGRITY IN 802 11 18 7 LOOPHOLES IN 802 11 SECURITY 18 8 WPA 18 9 WPA2 (802 11I) CHAPTER 19: SECURITY IN WIRELESS AD HOC NETWORKS 19 1 INTRODUCTION 19 2 BLUETOOTH CHAPTER 20: IMPLEMENTING BASIC WIRELESS SECURITY 20 1 INTRODUCTION 20 2 ENABLING SECURITY FEATURES ON A LINKSYS WAP11 802 11 B ACCESS POINT 20 3 FILTERING BY MEDIA ACCESS CONTROL (MAC) ADDRESS SR 802 11 B ACCESS POINT/ROUTER 20 5 ENABLING SECURITY FEATURES ON A LINKSYS WRT54G 802 1 LB/G ACCESS POINT/ROUTER AIRPLUS 2 4 GHZ XTREME G WIRELESS ROUTER WITH 4-PORT SWITCH 20 7 CON? GURING SECURITY FEATURES ON WIRELESS CLIENTS 20 8 SUMMARY 20 9 SOLUTIONS FAST TRACK CHAPTER 21: IMPLEMENTING ADVANCED WIRELESS SECURITY 21 1 INTRODUCTION 21 2 IMPLEMENTING WIFI PROTECTED ACCESS (WPA) 21 3 IMPLEMENTING A WIRELESS GATEWAY WITH REEF EDGE DOLPHIN 21 4 IMPLEMENTING A VPN ON A LINKSYS WRV54G VPN BROADBAND ROUTER 21 5 IMPLEMENTING RADIUS WITH CISCO LEAP 21 6 UNDERSTANDING AND CON? GURING 802 1X RADIUS AUTHENTICATION 21 7 SUMMARY 21 8 SOLUTIONS FAST TRACK IV: OTHER WIRELESS TECHNOLOGY CHAPTER 22: HOME NETWORK SECURITY 22 1 INTRODUCTION 22 2 THE BASICS OF WIRELESS NETWORKS 22 3 BASIC WIRELESS NETWORK SECURITY MEASURES 22 4 ADDITIONAL HOTSPOT SECURITY MEASURES 22 5 SUMMARY 22 6 ADDITIONAL RESOURCES CHAPTER 23: WIRELESS EMBEDDED SYSTEM SECURITY 23 1 WIRELESS TECHNOLOGIES 23 2 BLUETOOTH 23 3 ZIGBEE 23 4 WIRELESS TECHNOLOGIES AND THE FUTURE CHAPTER 24: RFID SECURITY 24 1 INTRODUCTION 24 2 RFID SECURITY IN GENERAL 24 3 RFID RADIO BASICS 24 4 WHY USE RFID? 24 5 RFID ARCHITECTURE WIRELESS TECHNOLOGY PART